Lead Program Manager - FedRAMP

Mark43; Boston (MA); Hybrid; USD 140,000 - 200,000; Full time

Job summary

Mark43 is seeking a FedRAMP Program Manager to lead our Security & Compliance efforts. This senior IC role owns the FedRAMP program and ensures alignment with company goals while maintaining regulatory standards.

The role requires US citizenship and a strong background in federal compliance, cloud security, and collaboration across Security, Engineering, and Product teams.

Qualifications

• 7+ years governance, risk, compliance, or security with federal programs.
• Experience leading compliance assessments and coordinating evidence in SaaS/cloud environments.
• Strong knowledge of NIST SP 800-53 and control implementations.
• Translate federal requirements into practical guidance for Engineering and Security teams.
• Autonomous, cross-functional collaboration and proactive communication.

Responsibilities

• Own FedRAMP program end-to-end within GRC.
• Lead continuous monitoring, SSP maintenance, evidence collection and required reporting.
• Coordinate assessment planning/execution with assessors, agency authorizing officials, and control owners.
• Translate federal requirements into practical guidance and assess impact of architectural changes.

Skills

GRC leadership

FedRAMP

NIST SP 800-53

Cloud security

Agency coordination

Stakeholder communication

Tools

AWS GovCloud

Job description

Applicants must be authorized to work for any employer in the country in which the role is being hired. We are unable to sponsor or take over sponsorship of an employment visa at this time.

Mark43's mission is to empower communities and their governments with new technologies that improve the safety and quality of life for all. We build powerful, scalable, and elegant software that sets a new standard for the tools upon which our first responders rely. Our users are diverse, and we are therefore committed to embracing diversity of thought and experience within our team.

We are looking for a FedRAMP Program Manager to join our Security & Compliance team. This is a senior individual contributor role designed for someone who thrives at the intersection of compliance, technology, and collaboration. You will take full ownership of Mark43's FedRAMP program, ensuring that it not only meets regulatory standards but aligns with broader company goals and frameworks.

Due to the nature of our customers and the responsibilities of this role, this position requires someone to be a U.S citizenship.

What You'll Do

• Own Mark43's federal compliance program end to end within GRC, focusing on FedRAMP Class D (High) and DoD IL4 requirements.
• Lead continuous monitoring, SSP maintenance, evidence collection, and required compliance reporting.
• Lead assessment planning and execution, coordinating with independent assessors, agency authorizing officials, and internal control owners.
• Coordinate resolution of assessment findings and control gaps, tracking owners, deadlines, and closure evidence.
• Partner with Security, Engineering, and Product to translate federal requirements into practical guidance and assess the compliance impact of architectural changes, features, and integrations.
• Work with technical owners to resolve gaps in system boundaries, inherited controls, and shared responsibilities across AWS GovCloud, Mark43 services, and third-party dependencies.
• Communicate our compliance posture and customer responsibilities to federal stakeholders, and evaluate security requirements for prospective contracts.
• Align federal controls and evidence with the broader GRC program, including CJIS, SOC 2, and applicable UK requirements.
• Report program health, risks, and readiness to GRC leadership, and incorporate evolving federal requirements into program priorities.

What You'll Need

We're looking for a Federal Compliance Program Manager with extensive experience leading compliance programs in SaaS or technology companies. This role requires strong technical understanding of cloud systems and security controls, sound compliance judgment, and the ability to guide cross‑functional teams through ambiguity.

Required Qualifications

• 7+ years of experience in governance, risk, compliance, or security assurance, including substantial responsibility for federal compliance programs.
• Experience leading compliance assessments, maintaining security documentation, coordinating evidence collection, and resolving assessment findings and control gaps in a SaaS, cloud, or technology environment.
• Strong working knowledge of NIST SP 800-53, including evaluating control implementations, validating evidence, and maintaining ongoing compliance.
• Technical understanding of cloud architectures, system boundaries, inherited controls, and shared responsibilities sufficient to evaluate compliance decisions with Engineering and Security.
• Ability to translate federal requirements into practical guidance and clearly communicate compliance posture to assessors, agency stakeholders, and leadership.
• Demonstrated ability to operate autonomously, drive cross‑functional commitments, and elevate risks without formal authority.

Preferred Qualifications

• Direct, hands‑on experience managing FedRAMP Moderate and/or High programs, including SSP maintenance, continuous monitoring, and assessment coordination.
• Experience supporting DoD IL4 and/or IL5 compliance requirements.
• Experience with AWS GovCloud, including control inheritance and shared responsibility models.
• Experience supporting federal agency authorization processes and evaluating security requirements in federal contracts.
• Experience aligning controls and evidence across federal requirements, CJIS, SOC 2, ISO 27001, or international public sector frameworks.
• Familiarity with CMMC and NIST SP 800-171.

People who thrive on our team tend to share the following traits

• - Humble, open, and curious: You invite collaboration and are open to learning from others
• - Systems thinker: You connect the dots across frameworks, environments, and priorities
• - Proactive communicator: You articulate complex topics clearly and keep stakeholders aligned

Where You Will Work

This role is hybrid in our Boston, MA office. The expectation is for this individual to be onsite once a week.

Mark43 has approved states for remote work and also maintains offices in New York City, Boston, and Manchester, UK. Travel may be required occasionally for team collaboration or customer engagement.

Mark43 is approved to hire in Canada, the UK, and 36 U.S. states, including Alabama, Arizona, California (excluding San Francisco), Colorado, Connecticut, Washington D.C., Florida, Georgia, Iowa, Idaho, Illinois, Indiana, Kansas, Massachusetts, Maryland, Maine, Michigan, Minnesota, Missouri, North Carolina, Nebraska, New Hampshire, New Jersey, New Mexico, New York, Ohio, Oklahoma, Oregon, Pennsylvania, South Carolina, Tennessee, Texas, Utah, Virginia, Vermont, Washington, Wisconsin, and West Virginia. Before applying to a remote role, please ensure that you are able to perform the position in one of the states listed above. State locations and specifics are subject to change as our hiring requirements shift.

Our Privacy Notice describes how Mark43 uses and protects the personal information of prospective employees during the recruitment process. It informs you about our handling of the personal information you provide to us when you apply for a position in our organization and in general when you express your interest in joining our team.

As a part of Mark43's security measures all employees must: Engage in appropriate use of the company's electronic information resources; Become knowledgeable about and follow relevant security policies and guidelines; Protect the resources under their control, such as passwords, computers, and data that they create, receive, or download; and Promptly report security-related incidents and violations, and responding to official reports of security incidents involving their systems or accounts.

Mark43 is committed to the full inclusion of all qualified individuals. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment, we will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed, please email [e-mail] requesting the accommodation.